This privacy statement is provided pursuant to art. 13 of EU regulation no. 679/2016 (the "Regulations") and is aimed at those who interact with the services of the site www.norulez.net (the "Site"), both through the simple consultation of the Site and through the use of specific services made available to provision through the Site itself (by way of example, the purchase of products, the completion of the online forms for subscription to the newsletter service, the reading of our reviews).
In accordance with the privacy legislation, the processing of your personal data will be based on the principles of lawfulness, correctness, transparency, purpose limitation and conservation, minimization and confidentiality, as well as the principle of accountability pursuant to art. 5 of the Regulation.
1. HOLDER OF THE TREATMENT AND ADDRESSES
The data controller is NO RULEZ (the "Data Controller") with registered office in NO RULEZ® Lungolago Giuseppe Motta 20, 6815 Melide (CH). The Data Controller can be contacted at any time with reference to this information and for any question regarding the processing of your data by sending a email to the following address: email@example.com
2. PERSONAL DATA OBJECT OF TREATMENT
The personal data being processed may consist of an identifier such as the name, an identification number, an online identifier (username), address and billing data, address and shipping data, age, gender and photographic image for your account. , purchase history and IBAN in case of reimbursement (hereinafter "Personal Data").
The following categories of data are also processed through the Site:
2.01 Navigation data
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site to check its correct functioning, to identify anomalies and / or abuses; in any case they are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Site or third parties.
2.02 Data voluntarily provided by the user
Except for the reference to specific information contained therein, this privacy statement is also intended for the processing of data voluntarily entered by you in the modules contained within the Site. With reference to the latter, we invite you not to enter information that may fall within in the category of special categories of personal data referred to in art. 9 of the Regulation ([...] personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data relating to the person's health or sexual life or sexual orientation).
2.03 Third party data voluntarily provided by the user
In the use of the services of the Site, the processing of Personal Data of third parties may occur, communicated by you to the Data Controller (such as, for example, in the case of the purchase of products to be sent to third parties). With respect to these hypotheses, you act as an independent data controller, assuming all the obligations and responsibilities of the law. In this sense, you grant the widest indemnity on this point with respect to any dispute, claim, request for compensation for damage from treatment, etc. that should reach the Data Controller from third parties, whose personal data have been processed through its use of the Website services in violation of the applicable rules on the protection of personal data. In any case, if you provide or otherwise process personal data of third parties in the use of the Site, you guarantee from now on, assuming all related responsibility, that this particular hypothesis of treatment is based, where necessary, on the prior acquisition, by Yours, the consent of the third party to the processing of information concerning him.
2.04 Cookies and other tracking technologies
2.05 PURPOSE OF THE TREATMENT
Your personal data will be processed, with your consent where necessary, for the following purposes:
(i) allow navigation of the Site and the provision of services made available by the Owner, including the management of the Site's security, as well as contractual and administrative-accounting relations;
(ii) find specific requests addressed to the Data Controller, including requests for customer assistance;
(iii) fulfill any obligations established by applicable laws, regulations or community legislation, or satisfy requests from authorities;
(iv) carry out direct marketing via e-mail for products similar to those purchased by you, pursuant to art. 130, paragraph 4 of the legislative decree n. 196/2003, unless your express refusal to receive such communications, which you can express during registration on the Site or on subsequent occasions;
(v) send you promotional and marketing communications, including the sending of newsletters and market research, through automated tools (sms, mms, email, push notifications) and not (paper mail, telephone with operator); it is specified that the Data Controller collects a single consent for the marketing purposes described here, pursuant to the General Provision of the Guarantor for the Protection of Personal Data "Guidelines on promotional activities and the fight against spam" of 4 July 2013; if, in any case, if you wish to oppose the processing of your data for marketing purposes carried out with the means indicated here, you can do so at any time by contacting the Data Controller at the addresses indicated in the "Contacts" section of this information, without prejudice to the lawfulness of the processing based on the consent given before the revocation;
(vi) communicate your personal data to other group companies for sending promotional and marketing communications, including the sending of newsletters and market research, through automated tools (sms, mms, email, push notifications ) and not (paper mail, telephone call with operator);
(vii) for statistical purposes, without it being possible to trace your identity.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
4. LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE PROCESSING
The legal basis for the processing of personal data for the purposes referred to in points 3 (i) and 3 (ii) is art. 6 (1) (b) of the Regulation according to which "[...] the processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same", as the treatments are necessary for the provision of services. The provision of personal data for these purposes is optional, but failure to provide it would make it impossible to respond to your requests.
The purpose referred to in point 3 (iii) represents a legitimate processing of personal data pursuant to art. 6 (1) (c) of the Regulation according to which “[…] the processing is necessary to fulfill a legal obligation to which the data controller is subject”. In fact, once the personal data has been provided, the processing is necessary to fulfill legal obligations to which the Data Controller is subject.
The treatments carried out for the purposes of marketing and communication to group companies described in points 3 (v) and 3 (vi) are based on the release of your consent pursuant to art. 6 (1) (a) on the basis of which "[...] the interested party has given consent to the processing of their personal data for one or more specific purposes" and art. 22 (2) (c) of the Regulation. The provision of your personal data for these purposes is therefore entirely optional and does not affect the use of the services. If you wish to object to the processing of your personal data for marketing or communication purposes, you can do so at any time by contacting the Data Controller at the email address: firstname.lastname@example.org
With reference to the purpose referred to in point 3 (iv), it is specified that if the Data Controller uses, for the purposes of direct sales of its products or services, the e-mail address provided by the interested party in the context of the sale of a product, may, pursuant to art. 130, paragraph 4 of the Code, do not request the consent of the interested party, provided that the products are similar to those being sold and the interested party, adequately informed, does not refuse such use, initially or on the occasion of subsequent communications.
It is also specified that the processing referred to in point 3 (vii) is not performed on personal data and therefore can be freely carried out by the Data Controller.
5. RECIPIENTS OF PERSONAL DATA
Elite Import Sagl puts privacy first. For this reason, it does not transfer your personal data to third parties for commercial purposes, which are instead processed exclusively by the Data Controller and by the group companies, where you allow it.
Your personal data for the purposes indicated above, may only be disclosed to the following recipients (the "Recipients"):
(i) subjects who typically act as data processors pursuant to art. 28 of the Regulation, namely: i) persons, companies or professional firms that provide assistance and advice to the Data Controller in accounting, administrative, legal, tax and financial matters; ii) subjects delegated to carry out technical maintenance of the site and the information system; iii) service providers used by the owners to achieve the purposes referred to in point 4 (eg app developers and server hosting service providers, sending mailing lists, electronic communication systems, chatbots, forwarding agents); always in compliance with the principle of minimization by limiting the processing to only the data strictly necessary for the achievement of the specific purpose;
(ii) subjects, bodies or authorities to whom it is mandatory to communicate your personal data by virtue of the provisions of the law or orders of the authorities;
(iii) persons authorized by the Data Controller, pursuant to Article 29 of the Regulation, to process personal data necessary to carry out activities strictly related to the provision of services, who are committed to confidentiality or have an adequate legal obligation of confidentiality;
(iv) group companies, limited to the pursuit of the purposes referred to in point (vii), subject to your explicit consent (as better specified in point 4).
The complete list of data processors is available by sending a written request to the Data Controller.
6. STORAGE OF PERSONAL DATA
Personal data processed for the purposes referred to in points 3 (i) and 3 (ii) will be kept until your account is closed or in the event of requests without creating an account, for the time strictly necessary to achieve said purposes. In any case, with reference to point 3 (i) since these are treatments carried out for the provision of services, the Data Controller will keep the Personal Data for the period of time provided and permitted by Italian law to protect its interests.
Personal data processed for the purposes referred to in point 3 (iii) will be kept until the time required by the specific obligation or applicable law.
For the purposes referred to in point 3 (iv), your personal data will be processed until you have opposed the processing.
For the purposes referred to in points 3 (v), your personal data will be processed until your account is closed or in case of requests without creating an account, up to a maximum of 24 months from the last interaction on the Site or in any case up to the revocation of your consent to the processing for these purposes.
7. RIGHTS OF THE INTERESTED PARTY
Pursuant to art. from 15 to 22 of the Regulation, you have the right at any time to obtain confirmation of the existence or otherwise of your personal data and to know its content and origin, verify its accuracy or request its integration or updating , or the rectification; has the right to request the limitation of processing in the cases provided for by art. 18 of the Regulation, where technically possible; to request the cancellation of personal data concerning you in the cases provided for by art. 17 of the Regulation; to obtain in a structured format, commonly used and readable by an automatic device, the Personal Data concerning you, in the cases provided for by art. 20 of the Regulation; as well as to oppose their treatment in the cases provided for by art. 21 of the Regulation.
In any case, you always have the right to lodge a complaint with the competent supervisory authority (Guarantor for the protection of personal data), pursuant to art. 77 of the Regulation, if you believe that the processing of your personal data is contrary to the legislation in force.
Lungolago Giuseppe Motta 20, 6815 Melide (CH)
T. +39 389 565 3631